bugGnash - The GNU Flash player - Bugs: bug #16622, std::bad_typeid thrown playing...

 
 

bug #16622: std::bad_typeid thrown playing http://mirror06.burton.com/flash/container.swf

Submitted by:  Michael Gratton <mjog>
Submitted on:  Thu 18 May 2006 04:53:13 PM UTC  
 
Category: NoneSeverity: 3 - Normal
Release: NoneStatus: Fixed
Privacy: PublicAssigned to: Sandro Santilli <strk>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri 16 Jun 2006 05:55:23 AM UTC, comment #4:

Fair enough, the exception is gone at least.

Michael Gratton <mjog>
Fri 16 Jun 2006 12:43:20 AM UTC, comment #3:

After some thinking about this situation, I guess we should close this bug. Unless we can access the sources of the movie there's no easy way to tell what should be expected. Using SWF dumpers there is no evidence of the 'main_mc' variable being ever set or assigned to an existing sprite.

Sandro Santilli <strk>
Project MemberIn charge of this item.
Sat 20 May 2006 11:20:32 PM UTC, comment #2:

Actually, this is still a bug.
The "target" argument of a loadClip() method does
not cast to an object, but I think it is actually
trying to reference a MovieClip, possibly ActionScript-created.
The name is 'main_mc', so it sounds as "Main MovieClip".
See http://flashhelp.321.lt/scripts/content/help.php?id=466

Sandro Santilli <strk>
Project MemberIn charge of this item.
Sat 20 May 2006 10:28:04 PM UTC, comment #1:

Input seems malformed:
Here's what I get with Ming's "listswf":

---------8<------------------------------

$ listswf container.swf
File version: 7
File size: 17029
Frame size: (0,16880)x(0,11600)
Frame rate: 30.000000 / sec.
Total frames: 1

Offset: 21 (0x0015)
Block type: 9 (SWF_SETBACKGROUNDCOLOR)
Block length: 3

RGBA: (ff,ff,ff,ff)

Offset: 26 (0x001a)
Block type: 24 (SWF_PROTECT)
Block length: 31

Stream out of sync...
30 but expecting 59

---------8<------------------------------

The gnash in head is not affected
by the bad_typeid() exception, I think
this was already fixed. Give it a try.
(remember: ``-v'' is your friend)

Sandro Santilli <strk>
Project MemberIn charge of this item.
Thu 18 May 2006 04:53:13 PM UTC, original submission:

After downloading and running the file using gnash locally (i.e. not in a browser), I got the following backtrace:

(gdb) run ~/data/incoming/container.swf
[Thread debugging using libthread_db enabled]
[New Thread -1225656640 (LWP 28832)]
terminate called after throwing an instance of 'std::bad_typeid'
what(): St10bad_typeid

Program received signal SIGABRT, Aborted.
[Switching to Thread -1225656640 (LWP 28832)]
0xffffe410 in __kernel_vsyscall ()
(gdb) bt
#0 0xffffe410 in __kernel_vsyscall ()
#1 0xb71259a1 in raise () from /lib/tls/i686/cmov/libc.so.6
#2 0xb71272b9 in abort () from /lib/tls/i686/cmov/libc.so.6
#3 0xb7304c84 in __gnu_cxx::__verbose_terminate_handler () from /usr/lib/libstdc++.so.6
#4 0xb7302915 in __gxx_personality_v0 () from /usr/lib/libstdc++.so.6
#5 0xb730294a in std::terminate () from /usr/lib/libstdc++.so.6
#6 0xb7302a7e in __cxa_throw () from /usr/lib/libstdc++.so.6
#7 0xb7301b11 in __cxa_bad_typeid () from /usr/lib/libstdc++.so.6
#8 0xb7814791 in gnash::moviecliploader_loadclip (fn=@0xbfc5dd34) at MovieClipLoader.cpp:227
#9 0xb782098b in gnash::call_method (method=@0xbfc5ddc8, env=0x829f928, this_ptr=0x82d4150, nargs=2, first_arg_bottom_index=7) at action.cpp:259
#10 0xb782641d in gnash::action_buffer::doActionCallMethod (this=0x82b5384, env=0x829f928) at action.cpp:961
#11 0xb7833006 in gnash::action_buffer::execute (this=0x82b5384, env=0x829f928, start_pc=1524, exec_bytes=576, retval=0xbfc5f1a8, initial_with_stack=@0x82d2e94, is_function2=true) at action.cpp:1923
#12 0xb7797359 in gnash::function_as_object::operator() (this=0x82d2e68, fn=@0xbfc5f128) at Function.cpp:348
#13 0xb78209cf in gnash::call_method (method=@0xbfc5f1c4, env=0x829f928, this_ptr=0x829f848, nargs=0, first_arg_bottom_index=3) at action.cpp:264
#14 0xb7826990 in gnash::action_buffer::doActionCallFunction (this=0x82b5384, env=0x829f928, with_stack=@0x0) at action.cpp:1010
#15 0xb7832c3d in gnash::action_buffer::execute (this=0x82b5384, env=0x829f928, start_pc=0, exec_bytes=2295, retval=0x0, initial_with_stack=@0xbfc6034c, is_function2=false) at action.cpp:1640
#16 0xb7835f7b in gnash::action_buffer::execute (this=0x82b5384, env=0x829f928) at action.cpp:791
#17 0xb787a602 in gnash::sprite_instance::do_actions (this=0x829f848) at Sprite.cpp:74
#18 0xb787e40f in gnash::sprite_instance::on_event_load (this=0x829f848) at Sprite.h:689
#19 0xb7863821 in gnash::movie_root::advance (this=0x82d5e00, delta_time=0) at Movie.cpp:705
#20 0x0804c056 in main (argc=2, argv=0xbfc60574) at gnash.cpp:868
(gdb)

Offending movie is attached.

Michael Gratton <mjog>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #10000:  container.swf added by mjog (13KiB - application/x-shockwave-flash - Flash movie causing the crash)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 6 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Tue 27 Jun 2006 06:49:22 PM UTCstrkStatusConfirmed=>Fixed
  Open/ClosedOpen=>Closed
Sat 20 May 2006 11:20:32 PM UTCstrkStatusFixed=>Confirmed
Sat 20 May 2006 10:28:04 PM UTCstrkStatusNone=>Fixed
  Assigned toNone=>strk
Thu 18 May 2006 04:53:13 PM UTCmjogAttached File-=>Added container.swf, #10000

Back to the top


Powered by Savane 3.1-cleanup1